That's pretty well it. You just have to remember that wilcards have a different meaning in RD2, and the help manual will explain the difference between '*' and '**'. Basically, in a 'Key' '*' only refers to that level, whereas '**' refers to all subkeys as well. But in a 'Value' '*' will have its normal wildkey meaning, so you don't need to change those.

The only other thing to note is that the default key set was greatly increased in RD2, thus many of the Kent/Tony keys (especially the latter) are now duplicated. You can either clear out the duplicates, as explained in the thread, or keep them since this will not affect the function of RD.

hi ... yes the default rule will protect you against most of the thing
After deleting duplicate, i beleive that each of tonny / kent file end up having about 19-20 keys protected.

When you have a Regdefend popup, you can use the dropdown in the top left corner to choose between friendly and advanced option.
In advanced option, you'll see what exactly is the rule and from what group it comes. So you can see if the alert is in a default group or in an addition.

service.exe is sometime a problem. You cannot really know who launched him, however i beleive that most of the key this thing play with are in the category driver / service wich is included in the default ruleset. So disabling tony/kent will not help i beleive.

You would only delete a rule that was giving you too many popups or too much log activity.

In practice I don't find any of the rules give problems, aside perhaps from the one quoted above, but of course it will depend upon individual choice - the more of the Registry you protect, the more popups you can expect.